LocalNet_Attacker

LocalNetAttacker This is a java based local network attacking tool. By using this tool you can attack or gather information about the target Windows Systems thats are connected with you in the same Network. Features Fetch IP details Fetch system details Web attacks Directory discovery Download an...

parquet-canary-exploit-rce-poc-CVE-2025-30065

Parquet CVE-2025-30065용 Canary Exploit -. '-. OO OO .-----,--/ ,. ,------. .-----. .----. .-----..------. .-----. .----. .----. ,--. .------. ' .--.\ \ //| .---' .-'/ ,-. / .. / ,-. | | .-' / -. / .. \ / .. \ / .' | | | |'-.\ \ / / | | OO'-' | . / \ '-' | | '--. OO'-' ' . / \ . / \ . / -. | '--...

dtls-fuzzer

dtls-fuzzer is a Java tool which performs protocol state fuzzing of DTLS servers. More concretely, it supports the following functionality: 1. given an alphabet, it can automatically generate a model of a local DTLS server implementation; 2. given a test sequence of inputs and an alphabet, it can...

OnionHarvester

OnionHarvester V2 A small TOR Onion Address harvester for checking if the address is available or not. The program uses the TOR local socks5 proxy for finding all the Onion Addresses which are alive and ports 80 and 443 are available. Details about the project and TOR onion harvesting is publishe...

AndroTickler

AndroTickler A java tool that helps to pentest Android apps faster, more easily and more efficiently. AndroTickler offers many features of information gathering, static and dynamic checks that cover most of the aspects of Android apps pentesting. It also offers several features that pentesters ne...

o5logon-fetch

o5logon-fetch Oracle 11 서버의 CVE-2012-3137 취약점을 악용하는 작은 Java 프로그램입니다. 이 취약점을 이용하면 감사 추적 없이 오프라인 무차별 대입 공격을 수행하여 특정 사용자의 비밀번호를 알아낼 수 있습니다. 취약점 세부 정보 취약점에 대한 상세 설명과 이로부터 자신을 보호하는 방법은 여기에서 확인할 수 있습니다. 대체 도구 이 도구의 대안으로 여기에 있는 mmap 스크립트가 있습니다. 도구를 사용하지 않으려면 수동으로 다음 절차를 따를 수 있습니다: Oracle Instant Client...

CVE-2022-26134_Behinder_MemShell

CVE-2022-26134BehinderMemShell 원본 프로젝트 주소: https://github.com/BeichenDream/CVE-2022-26134-Godzilla-MEMSHELL Behinder 메모리 쉘에 연결하도록 수정함 java -jar CVE-2022-26134BehinderMemShell.jar http://192.168.0.193:8090/ password123...

ParrotNG

ParrotNG ParrotNGは、CVE-2011-2461 に対して脆弱なAdobe Flexアプリケーション（SWF）を特定できるツールです。詳細については、Troopers 2015の発表スライド を参照してください。 最新リリースはこちらからダウンロードしてください。 機能 Javaで記述、swfdump ベース 1つのJAR、2つのフレーバー：コマンドラインユーティリティとBurp Pro パッシブスキャナプラグイン 脆弱なFlex SDKバージョンでコンパイルされたSWFファイル、Adobeのツール でパッチ適用済み、または影響を受けていないものの検出 使用方法 -...

netty-http2-check

netty-http2-check Offline checker for the 7io.netty:netty-codec-http2 CVEs. Tells you which ones you are actually exposed to — and the single version that fixes all of them: 4.1.136.Final / 4.2.16.Final, a number that appears on none of the seven advisories. CVE-2025-55163 · CVE-2026-33871 ·...

AttackTomcat

AttackTomcat 취약점 탐지 목록 CVE-2017-12615 PUT 파일 업로드 취약점 tomcat-pass-getshell 약한 인증 WAR 배포 약한 비밀번호 무차별 대입 CVE-2020-1938 Tomcat 파일 읽기/ 포함 사용 방법 처음 사용하기 전에 설정에서 구성 파일을 다시 설정하세요. 다른 문제는 자세히 읽어보세요!!!, java -jar .jar 로 시작하면 실행 로그 정보를 볼 수 있습니다!! ​ 소스 코드를 Maven으로 컴파일하거나 Releases를 직접 다운로드하세요. ​ JAR 파일을 더블클릭하...

CVE-2019-7238_Nexus_RCE_Tool

迈萌 CVE-2019-7238 Nexus RCE 취약점 탐지 도구 도구 소개 시간을 내어 Java로 이 작은 도구를 작성했습니다. CVE-2019-7238 취약점을 한 번에 탐지하고 시스템 명령을 실행할 수 있으며, GUI 및 명령줄 두 가지 사용 방식을 지원합니다. 이 도구는 법률 및 규정이 허용하는 범위 내에서 보안 전문가만 사용해야 하며, 위반 시 모든 책임은 사용자에게 있습니다. 실행 방법 GUI: cve-2019-7238.jar 더블 클릭 또는 java -jar cve-2019-7238.jar 명령줄: java -ja...

passfault

Welcome to OWASP Passfault Objective: Do Passwords Better! NOTE: This project has been discontinued, but the zxcvbn project has a very similar approach and has been quite successful. We recommend using that library. Running the Command-line Interface: 1. install java 8 jdk 2. cd commandLine 3...

Janus-CVE-2017-13156

Janus-CVE-2017-13156 사용 지침 : java -jar Janus.jar Janus dexfile apkfile outputfile Janus.jar : source/Janus.jar...

vpn_exploitation_tool

AD + Citrix VPN Data Harvester Modular Java tool for testing...

gadgetinspector

This is a Java-based tool for finding deserialization gadget chains in Java applications. The tool is called "Gadget Inspector" and is presented as a project that was showcased at Black Hat USA 2018. The tool is designed to automatically discover possible gadget chains in an application's...

ysoserial

This is a Java-based proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization. The tool, named ysoserial, is designed to create gadgets that can be used to execute arbitrary commands on a vulnerable application. The gadgets are created by wrapping a...

DependencyCheck

This is an open-source project for a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies. The project is called OWASP dependency-check. The project is written in Java and is designed to be used in a variety of environments, including...

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Checkpoint Quantum_Spark_Firmware

CVE202424919 Vulnerability Scanner This Java tool scans a l...

Security Bulletin: SPSS Modeler Java API Documentation Frame Injection Vulnerability (CVE-2013-1571)

Abstract Java API Documentation contains a frame injection vulnerability Content VULNERABILITY DETAILS: CVEID: CVE-2013-1571 DESCRIPTION: HTML documentation generated by the Javadoc tool contains a security vulnerability. The vulnerability allows an attacker to craft a malicious link to the...

OBDA systems Mastro 安全漏洞

OBDA systems Mastro is a Java tool for ontology-based data access OBDA from OBDA systems, Italy. A security vulnerability exists in OBDA systems Mastro version 1.0 that stems from an XML entity extension attack that is vulnerable to denial of service...